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Amendments to the Claims : 

This listing of the claims replaces all prior versions 
and listing of the claims in the present application. 
Listing of Claims: 

1-9. (canceled) 

10. (currently amended) A method for executing on a 
computer a security critical activity having at least one action, 
the security critical activity being initiated by a user of the 
computer and executed by a security device connected to the 
computer, the method comprising the steps of: 

before starting execution of the security critical 
activity, the user of the computer defining in a proxy letter a 
situation in which the proxy letter is allowed to handle the 
security critical activity; 

starting execution of an action of the security 
critical activity in a present situation; 

determining, for the started action and the present 
situation and based on the proxy letter, whether (a) the proxy 
letter is allowed to handle the started action without direct 
user involvement or (b) the user is required to handle the 
started action; 

when the started action is handled by the proxy letter 
or by the user, completing the started action and repeating the 
starting execution and determining steps for each action in the 
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security critical activity until each action in the security 
critical activity has been completed; and 

when started action is handled neither by the proxy 
letter nor by the user, stopping execution of the security 
critical activity . 

11. (previously presented) The method of claim 10, 
wherein the defining step includes the step of defining in the 
proxy letter situations in which the proxy letter is allowed to 
grant an action. 

12. (previously presented) The method of claim 10, 
wherein the defining step includes the step of defining in the 
proxy letter situations in which the proxy letter is allowed to 
prevent an action from being executed. 

13. (previously presented) The method of claim 12, 
further comprising the steps of determining whether the proxy 
letter is allowed to prevent an action from being executed and 
stopping execution of the action when the action is one the proxy 
letter is allowed to prevent from being executed. 

14. (previously presented) The method of claim 10, 
wherein the determining step includes the steps of reading the 
proxy letter and requesting direct user involvement if the proxy 
letter is not allowed to handle the started action. 

15. (previously presented) The method of claim 14, 
following the step of requesting direct user involvement, further 
comprising the steps of waiting a predetermined period of time 
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and, when direct user involvement has not occurred within the 
predetermined period of time, stopping execution of the security 
critical activity . 

16. (previously presented) The method of claim 10, 
wherein the step of completing the started action comprises the 
step of logging whether the proxy letter or the user handled the 
action . 

17. (previously presented) The method of claim 10, 
wherein the security critical activity includes a money 
transaction and wherein the defining step provides that the proxy 
letter is allowed to handle the started action without direct 
user involvement when an amount of money in the transaction does 
not exceed a predetermined amount and that the user is required 
to handle the started action when the amount of money in the 
transaction exceeds the predetermined amount. 

18. (currently amended) A method for executing on a 
computer a security critical activity having at least one action, 
the security critical activity being initiated by a user of the 
computer and executed by a security device connected to the 
computer, the method comprising the steps of: 

operating the computer in a secure management mode in 
which permission of the user of the computer is required before 
performing each action of the security critical activity; 

before starting execution of the security critical 
activity, the user of the computer defining in the computer a 
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first group of situations and a second group of situations, the 
first group being situations in which the user's permission to 
perform each action in the security critical activity is granted 
automatically without further involvement of the user, and the 
second group being situations in which the user's permission to 
perform each action in the security critical activity is not 
granted automatically and must be obtained prior to performing 
each action of the security critical activity; 

when performing the security critical activity, 
determining which one of the first and second groups of 
situations is applicable; 

completing the security critical activity by performing 
each action when the first group of situations is applicable, and 
completing the security critical activity by performing each 
action when the second group of situations is applicable and the 
user of the computer grants permission for each action to be 
performed; and 

not completing the security critical activity when the 
second group of situations is applicable and the user of the 
computer does not grant permission for an action of the security 
critical activity to be performed. 

19. (previously presented) The method of claim 18, 
wherein the security critical activity includes a money 
transaction and wherein the first group of situations includes 
money transactions that do not exceed a predetermined amount of 
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money and the second group of situations includes money 
transactions that exceed the predetermined amount of money. 



6 



